一种新的访问控制模型——TBPM-RBAC

基于角色的访问控制RBAC(role—based access control)能够降低访问控制管理工作的复杂性，但是要在RBAC申高效合理地为角色配置权限仍然具有一定的难度，而且RBAC不适合处理存在依赖和时序关系的访问控制。本文通过在RBAC中引入任务机制解决以上两点困难，即权限被授予任务，任务被授予角色，角色只能使用它正在执行的任务所允许的权限。提出了TBPM-RBAC(task—based permissions management in RBAC)模型，给出了模型的定义，对模型进行了分析并给出了模型的两个应用示例。

A New Access Control Model--TBPM-RBAC

RBAC (role-based access control)can reduce the complexity of the management of access control, but it's still rather difficult to assign permissions to roles efficiently and reasonably,further more,RBAC is not fit to manage the access controls where exists dependency and sequence. This paper tries to solve the two difficulties mentioned above by embedding task mechanism in RBAC,that is,permissions are assigned to tasks,tasks are assigned to roles, and a role can only use the permissions that are allowed by the tasks it's executing. A model called TBPM-RBAC (task-based permissions management in RBAC)is proposed,then we present the definitions of the model,analyze the model and give two application examples of the model.